This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: xyL1VPgggIZkrBmWZyD0/Dbwepy20xvXyQWO3qfKK5o= Subject key identifier: 68:4A:20:14:A1:F3:08:63:55:22:CD:B2:12:05:5B:A9:24:80:91:EE Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 042D Signing time: Sat 24 Jan 2026 23:31:42 +0000 Manifest this update: Sat 24 Jan 2026 23:31:41 +0000 Manifest next update: Sat 31 Jan 2026 23:31:41 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: /4zYcHv/HuJutYI2kItkqp4l4UvQOc/4APbeUWD9Fsw=) 2: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: XGuuKVGIEltroOkaLIfkXvo4+Qd8e1UxzERGE1Xa7EM=) 3: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: nBxVvzmtBqkJjIM89kDyeNDRTPleOjC1xfsXd7rUY30=) 4: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: TEe1vP6DRB8YT8k0USYkc2bmS+7dNHehlpCLdcwXNpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Jan 24 23:31:41 2026 GMT Not After : Jan 31 23:31:41 2026 GMT Subject: CN=6975565d-c376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:7e:72:39:07:bb:04:74:71:03:66:ab:8b: ec:55:d1:72:ec:90:33:9f:78:5d:88:92:05:74:93: df:2f:c0:b7:04:a3:03:e6:5f:33:70:da:e1:68:42: 91:b7:67:c5:37:09:36:d9:a3:d1:b6:80:9a:80:45: 33:3c:df:92:58:da:ae:64:b4:f0:12:f5:ce:f3:67: 02:25:6b:6b:73:1f:d4:f4:1e:bd:a8:b5:cb:09:ae: 1a:02:52:61:cd:6e:db:cb:d4:dc:5a:90:9b:cd:7e: ed:4a:ab:a7:eb:3f:d9:24:19:14:b9:05:ca:c1:41: a6:6e:c5:b9:95:09:fd:06:8c:06:f9:be:d3:29:49: 62:ae:45:00:42:39:c2:19:c1:4e:bb:35:7d:31:de: d1:1e:79:22:65:87:6e:d8:aa:7c:cd:04:3a:ad:b2: b1:72:e2:4f:da:a6:88:95:bc:11:4f:8c:8b:d8:1f: 37:3c:3b:c2:14:78:24:1a:67:db:54:1d:58:9b:99: 1e:80:88:40:2d:53:28:c1:29:f2:e2:47:68:b1:15: 76:97:8e:27:da:30:9e:be:e1:79:00:f3:c8:a7:f9: 39:37:88:26:52:3d:81:63:15:c8:6c:c4:34:db:ed: 2d:12:c6:7e:01:bb:ee:29:e3:a4:8c:29:79:97:6a: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4A:20:14:A1:F3:08:63:55:22:CD:B2:12:05:5B:A9:24:80:91:EE X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:14:c4:ac:75:93:cf:03:e8:b4:ff:c0:0a:85:0f:e4:01:b7: f1:09:51:37:c6:51:dd:26:8d:5e:21:62:ca:24:66:ae:e7:78: 31:a7:12:b6:c9:6a:93:3c:b6:35:e9:1c:e9:61:d2:ab:07:4d: 54:fe:db:e7:f8:7a:4d:26:ea:29:6a:bb:00:89:60:08:2d:e7: ec:64:24:c3:f2:f2:d4:c5:84:e9:6d:e5:b3:58:67:90:46:0b: 09:2e:ba:39:d7:61:d1:04:f1:34:9f:2c:d8:f3:25:88:f4:2d: af:95:44:56:f8:67:d1:c9:a2:dc:15:b1:14:4c:45:fd:75:72: ad:d2:71:6f:e6:01:c3:10:eb:87:e3:97:52:1b:11:88:04:ca: ee:d1:3b:20:80:27:8d:d3:f6:c0:28:08:9c:e2:9d:68:ca:85: e5:a8:95:39:78:a4:61:d1:33:d4:3b:96:58:84:af:36:da:47: 1f:4f:2f:c4:11:5b:47:00:ef:4c:51:c8:39:1d:ce:69:e2:14: b7:07:d7:ac:8e:56:8b:47:9b:a5:c1:22:df:e0:b3:59:18:90: 65:33:ab:fe:72:36:d9:90:f6:b8:d7:c0:d5:56:58:78:d8:47: 92:68:36:c6:48:9a:7a:ec:6e:6a:94:3c:03:00:35:f6:50:3a: d4:4c:47:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjYwMTI0MjMzMTQxWhcNMjYwMTMxMjMzMTQxWjAYMRYwFAYD VQQDDA02OTc1NTY1ZC1jMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC1+cjkHuwR0cQNmq4vsVdFy7JAzn3hdiJIFdJPfL8C3BKMD5l8zcNrhaEKR t2fFNwk22aPRtoCagEUzPN+SWNquZLTwEvXO82cCJWtrcx/U9B69qLXLCa4aAlJh zW7by9TcWpCbzX7tSqun6z/ZJBkUuQXKwUGmbsW5lQn9BowG+b7TKUlirkUAQjnC GcFOuzV9Md7RHnkiZYdu2Kp8zQQ6rbKxcuJP2qaIlbwRT4yL2B83PDvCFHgkGmfb VB1Ym5kegIhALVMowSny4kdosRV2l44n2jCevuF5APPIp/k5N4gmUj2BYxXIbMQ0 2+0tEsZ+AbvuKeOkjCl5l2p3ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhKIBSh 8whjVSLNshIFW6kkgJHuMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3FMSsdZPPA+i0/8AKhQ/kAbfxCVE3xlHdJo1eIWLKJGau53gxpxK2 yWqTPLY16RzpYdKrB01U/tvn+HpNJuoparsAiWAILefsZCTD8vLUxYTpbeWzWGeQ RgsJLro512HRBPE0nyzY8yWI9C2vlURW+GfRyaLcFbEUTEX9dXKt0nFv5gHDEOuH 45dSGxGIBMru0TsggCeN0/bAKAic4p1oyoXlqJU5eKRh0TPUO5ZYhK822kcfTy/E EVtHAO9MUcg5Hc5p4hS3B9esjlaLR5ulwSLf4LNZGJBlM6v+cjbZkPa418DVVlh4 2EeSaDbGSJp67G5qlDwDADX2UDrUTEc8 -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:08 2026 by rpki-client